Event Driven Access Controls
summary
Prototype automates event-driven access: PagerDuty webhook triggers a Boundary + Vault + PagerDuty workflow that vends ephemeral Postgres credentials via Vault, grants a Boundary target for 11 minutes, and revokes them after incident resolution. Implementation uses Terraform modules, Boundary API/CLI, Vault transit/kv, and a small gate service that verifies HMACs from PagerDuty and calls Boundary; demo shows the flow working end-to-end on a HashiCorp stack.
AI-written summary · about
chapters (12)
- 0:00Introduction to security talk
- 1:46Problem with traditional access
- 5:21Introducing Gate project
- 7:09Live demo setup
- 12:09Accessing production database
- 16:25Resolving the incident
- 20:40Codifying the workflow
- 26:42Security and trust model
- 31:18Handling more access needs
- 33:50Automation and documentation
- 37:17Least privilege and policies
- 39:05Conclusion and Q&A
related talks
32mThe End of Shared Passwords with Vault and Boundary
25mBuild a self-service access management solution with GitHub and Boundary
39mExplore HashiCorp Boundary
32mSplicing the Identity Based Access Gene into your Infrastructure DNA with HashiCorp Boundary
29mZero Trust Security and Identity Management with Boundary
32mSimplifying remote access in dynamic environments with Boundary
24mEmpowering credential injection at scale using Boundary
31mModern Security with Microservices and the Cloud